Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2.

摘要

The Security Content Automation Protocol (SCAP) is a suite of specifications that standardize the format and nomenclature by which software flaw and security configuration information is communicated, both to machines and humans.1 SCAP is a multi-purpose framework of specifications that support automated configuration, vulnerability and patch checking, technical control compliance activities, and security measurement. Goals for the development of SCAP include standardizing system security management, promoting interoperability of security products, and fostering the use of standard expressions of security content. SCAP version 1.2 is comprised of eleven component specifications in five categories: Languages; Reporting formats; Enumerations; Measurement and scoring systems; and Integrity.